CVE-2023-28147

Опубликовано: 02 июн. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r29p0 through r32p0, Bifrost r17p0 through r42p0 before r43p0, Valhall r19p0 through r42p0 before r43p0, and Arm's GPU Architecture Gen5 r41p0 through r42p0 before r43p0.

Ссылки

https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
Vendor Advisory
https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arm:avalon_gpu_kernel_driver:*:*:*:*:*:*:*:*

Версия от r41p0 (включая) до r43p0 (исключая)

cpe:2.3:a:arm:bifrost_gpu_kernel_driver:*:*:*:*:*:*:*:*

Версия от r17p0 (включая) до r43p0 (исключая)

cpe:2.3:a:arm:midgard_gpu_kernel_driver:*:*:*:*:*:*:*:*

Версия от r29p0 (включая) до r32p0 (включая)

cpe:2.3:a:arm:valhall_gpu_kernel_driver:*:*:*:*:*:*:*:*

Версия от r19p0 (включая) до r43p0 (исключая)

EPSS

Процентиль: 22%

0.00073

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-38mh-jrc4-gqqf